Autonomous System Provider Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/zFkMsU2Ki3kYCr1AL0Xl9I_m70E.asa
File: zFkMsU2Ki3kYCr1AL0Xl9I_m70E.asa (raw, json)
Hash identifier: GMPe7sTqw+dOkVUiUyhnUSjlJ2HjlS6Jp/u6GDQXZoE=
Subject key identifier: CC:59:0C:B1:4D:8A:8B:79:18:0A:BD:40:2F:45:E5:F4:8F:E6:EF:41
Certificate issuer: /CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Certificate serial: 019D1748F1A4F77AD47E9CD039A623078B9B
Authority key identifier: 47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/zFkMsU2Ki3kYCr1AL0Xl9I_m70E.asa
Signing time: Sun 22 Mar 2026 20:42:29 +0000
ASPA not before: Sun 22 Mar 2026 20:42:29 +0000
ASPA not after: Thu 01 Jul 2027 00:00:00 +0000
Customer ASID: 214329
Providers: AS: 174
AS: 1299
AS: 3225
AS: 3257
AS: 6939
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:17:48:f1:a4:f7:7a:d4:7e:9c:d0:39:a6:23:07:8b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4773243081eadc1ef4ae3234f86b2bd72622b5c4
Validity
Not Before: Mar 22 20:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc590cb14d8a8b79180abd402f45e5f48fe6ef41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:09:53:c2:f5:b5:c1:3e:ad:fb:05:c1:5a:
a8:d4:bb:a3:c9:49:87:6c:05:4d:bf:9e:16:ec:27:
06:e8:9c:b1:57:4b:8f:e5:97:d3:6c:ab:a1:0b:26:
7b:41:49:b0:65:22:4a:96:0e:9d:4c:21:18:bf:b7:
b9:36:89:d4:40:32:d1:8d:c2:4f:42:fa:77:07:a3:
8b:87:5f:d0:e2:8d:72:10:65:3c:b0:a7:c4:b0:bd:
60:9b:61:de:3a:dd:e7:df:6d:2a:01:0c:56:e1:1e:
4d:aa:76:6a:f1:3c:ff:70:48:3c:d2:15:2e:8c:a3:
c5:f4:8c:dc:e0:d4:8e:3b:ee:e7:33:d4:ce:87:d3:
2c:6b:bf:7c:76:1f:a8:fa:66:ec:76:b4:e7:08:74:
d1:5d:02:8a:98:8e:91:56:53:f0:ae:3e:e5:b0:08:
92:44:b3:7c:18:3d:8b:6f:82:7c:ee:25:f6:11:57:
55:17:ed:b9:e2:42:4a:aa:49:2b:47:df:19:e5:36:
ba:b7:b1:fb:a6:b5:98:17:1f:cd:6a:57:e4:38:2b:
be:87:13:1c:50:77:b1:6a:3e:85:68:7e:d5:c8:de:
bd:c8:5d:0f:bc:e6:ec:97:59:70:00:6f:25:1f:77:
ef:d7:09:4a:b9:f0:ee:69:05:c0:89:b6:a3:58:d7:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:0C:B1:4D:8A:8B:79:18:0A:BD:40:2F:45:E5:F4:8F:E6:EF:41
X509v3 Authority Key Identifier:
keyid:47:73:24:30:81:EA:DC:1E:F4:AE:32:34:F8:6B:2B:D7:26:22:B5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3MkMIHq3B70rjI0-Gsr1yYitcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/zFkMsU2Ki3kYCr1AL0Xl9I_m70E.asa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b54988-87e1-4a9d-a33b-34a949c92074/1/R3MkMIHq3B70rjI0-Gsr1yYitcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214329
Signature Algorithm: sha256WithRSAEncryption
5b:ac:d2:41:58:bc:36:86:ab:5d:ca:32:ce:10:f4:e9:52:36:
e3:cd:4e:eb:f7:02:51:86:28:67:31:3b:6a:1a:75:16:71:1e:
e1:b3:95:f3:9b:1d:59:a4:a1:44:c6:0b:75:42:3a:b3:5e:55:
0a:67:7e:3a:e9:b5:31:da:a8:ae:9d:0f:b5:fb:98:01:be:fd:
f8:c7:53:fb:b5:5b:22:35:e0:e5:66:b5:ff:35:87:9c:55:94:
eb:b2:00:b6:3a:cd:51:07:6e:5c:78:d9:5e:6e:70:a5:7f:f4:
3a:bf:d6:e3:fa:bb:db:93:3d:6b:95:7b:1d:be:dc:64:2c:5d:
3a:45:d1:9b:1d:d4:70:36:76:20:59:4d:9b:1e:ed:50:3f:8b:
c6:d8:69:4f:ce:8c:1b:4a:2a:60:40:5d:24:c8:ed:c4:60:9a:
ec:0a:5e:77:56:ac:40:27:ed:63:2b:6e:f2:a2:84:71:7e:48:
08:02:fd:28:dc:2e:f3:53:49:20:44:11:84:0f:52:c6:5a:05:
47:95:bc:4c:48:e6:9d:51:0b:25:97:41:38:56:5b:90:8d:18:
38:9e:1b:f0:63:75:ee:46:5a:93:2e:1c:e9:cd:4f:c2:37:b9:
7c:64:a6:1e:a6:bb:4e:1c:03:78:bb:5c:8b:6f:19:bc:79:03:
5f:4c:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 20:06:08 2026 by rpki-client